You open your Google Business Profile and your heart drops. Five new one-star reviews overnight. Then three more by lunchtime. The reviewers' names don't match any customer records. The complaints describe things that never happened. You're under a competitor fake review attack — and every hour those reviews remain live, potential customers are choosing somewhere else. I've helped dozens of businesses survive exactly this scenario, and the next 48 hours are critical. Here's your emergency response playbook.
If You're Currently Under Attack — Do These 3 Things Now
- Stop. Do NOT respond publicly to any suspected fake reviews. Public responses can alert attackers and prompt them to edit reviews to remove detectable patterns.
- Screenshot everything. Capture every suspicious review — full text, reviewer profile, date, and any reviewer activity visible on their profile. Do this before anything is edited or deleted.
- Contact us for an emergency assessment. Our free review audit identifies fake review patterns and policy violations. Time is critical — the sooner we begin the dispute process, the sooner fraudulent reviews can be challenged.
Signs You're Experiencing a Competitor Review Attack
Not every cluster of bad reviews is a competitor attack. Sometimes a genuine service failure triggers multiple legitimate negative reviews. Before you launch a dispute campaign, you need to confirm that the reviews are actually fraudulent. Here are the patterns I look for when assessing whether a business is under coordinated attack:
Timing Anomalies
The most obvious indicator is an abnormal volume of negative reviews in a compressed timeframe. If your business typically receives two to three reviews per week and suddenly gets eight one-star reviews in 48 hours, that's a statistical anomaly that warrants investigation. Look at your review velocity — the rate at which new reviews appear — and compare the attack period to your historical baseline.
Reviewer Profile Red Flags
Click on every reviewer's profile and document what you find. Coordinated attacks typically share several of these characteristics:
- New accounts: Profiles created days or weeks before the review was posted, with minimal activity
- Single-review accounts: Reviewers whose only review is the one on your business
- No profile photos: Default Google account avatars across multiple suspicious reviews
- Geographic inconsistency: Reviewers who have previously reviewed businesses in completely different cities or countries
- Cluster patterns: Multiple reviewers who also reviewed the same set of other businesses — this is a telltale sign of a purchased review ring
Content Red Flags
Fake reviews often share content patterns that genuine reviews don't. Look for:
- Vague complaints: "Terrible experience, would never go back" without specific details about what happened
- Factual impossibilities: Describing products or services you don't offer, referencing times you were closed, or describing physical features that don't exist in your business
- Similar language: Multiple reviews using the same phrases, sentence structures, or complaint themes — particularly when the language doesn't sound natural
- No order or booking history: Cross-referencing reviewer names against your records and finding no matches
Competitive Context
Has a new competitor recently opened nearby? Did you recently win a major contract or receive positive media coverage? Have you had a dispute with another business owner? Competitor attacks rarely happen in isolation — there's usually a triggering event. Identifying this context strengthens your dispute case because it establishes motive.
Immediate Response: The First 48 Hours
Hour 0—2: Document Everything
Your first priority is creating an evidence archive before anything changes. Take timestamped screenshots of every suspicious review. Click through to each reviewer's profile and screenshot their complete review history. Create a spreadsheet logging the review date, reviewer name, account creation date (if visible), review text, star rating, and any patterns you notice. Save this evidence to a shared drive or folder that won't be accidentally deleted.
Hour 2—6: Cross-Reference Customer Records
Compare every suspicious reviewer name against your complete customer database. Check your POS system, booking platform, email records, and any customer management tools you use. For each reviewer, note whether they match any customer record. If they don't match, this is your primary evidence for a fake engagement dispute. If some names do match but the review content describes experiences that never occurred, document the discrepancy.
Hour 6—12: Analyse Patterns and Build Your Case
With your evidence gathered, identify the patterns that prove coordination. Map out the timing — did reviews cluster within specific hours? Do reviewer profiles share characteristics? Do multiple reviewers have overlapping review histories on other businesses? This pattern analysis is what distinguishes a "we think these are fake" complaint from a compelling, evidence-backed dispute that Google's team can act on.
Hour 12—24: File Disputes
Once your evidence is organised, file individual disputes for each fraudulent review. Follow the step-by-step process in our guide to reporting reviews for policy violations. For each dispute, cite the specific policy violation (typically "fake engagement" under Google's deceptive content policy), provide your evidence, and reference the coordinated nature of the attack. Filing disputes individually — rather than one bulk complaint — tends to produce better outcomes because each review is assessed on its own merits.
Hour 24—48: Escalate to Google Support
Don't wait for the standard dispute process to run its course. Contact Google Business Profile support directly and explain that you're experiencing a coordinated fake review attack. Provide your evidence package — the spreadsheet, screenshots, and pattern analysis. Ask the support agent to escalate your case to the content moderation team as a coordinated abuse case, which receives higher priority than individual review flags.
Reporting to Google: Best Practices for Attack Scenarios
When you're dealing with a coordinated attack rather than a single policy-violating review, your reporting strategy needs to be different. Standard one-at-a-time flagging still works, but you need to supplement it with escalation that communicates the coordinated nature of the abuse.
Individual Dispute + Escalation Strategy
I recommend a dual-track approach: file individual disputes for each fake review through the standard flagging process, and simultaneously open an escalation case through GBP support that frames the situation as a coordinated attack. In the escalation case, provide a summary document that includes the total number of suspected fake reviews, the timeframe of the attack, the pattern analysis demonstrating coordination, and your evidence that the reviewers were not customers.
Google's Review Management Tool
Google's dedicated review management tool (accessible through the GBP help centre) allows batch submissions and more detailed evidence uploads. For coordinated attacks involving five or more reviews, this tool is often more effective than the standard flag-one-at-a-time approach. It allows Google to see the full picture of the attack pattern in a single submission.
Legal Options: When Google Isn't Enough
Sometimes Google's dispute process doesn't resolve the situation fully. Some fake reviews may survive the moderation process, or new waves of fake reviews may appear after the first batch is addressed. When that happens, legal remedies become relevant.
FTC Enforcement: A Real Deterrent
The US Federal Trade Commission (FTC) has taken an increasingly aggressive stance on fake reviews. In August 2024, the FTC finalised its rule explicitly prohibiting fake reviews, and enforcement actions have followed. Notable FTC actions against fake review operations include cases where the agency imposed significant fines on companies found to be posting or purchasing fake reviews, including reviews targeting competitors.
The FTC's rule prohibits businesses from creating, buying, or selling fake reviews; repurposing reviews written for one product to market another; compensating for positive or negative reviews; and using insider reviews without disclosure. If you have evidence that a competitor is behind the fake review attack on your business, filing an FTC complaint creates a paper trail that can lead to enforcement action and serves as evidence in any subsequent legal proceedings.
ACCC Reports (Australia)
In Australia, the Australian Competition and Consumer Commission (ACCC) treats fake reviews as misleading or deceptive conduct under the Australian Consumer Law (ACL). The ACCC has brought enforcement actions against businesses engaging in fake review practices. Filing a report with the ACCC is straightforward — you can do so through their online reporting form at accc.gov.au. While the ACCC may not act on individual cases, reports contribute to their intelligence gathering and can trigger investigations when patterns emerge.
Cease and Desist Letters
If you've identified the competitor responsible for the attack, a cease and desist letter from a solicitor or attorney can be a powerful first step. A well-drafted cease and desist puts the competitor on notice that you're aware of their actions, you have evidence, and you're prepared to escalate legally. Many fake review campaigns stop after a cease and desist because the cost-benefit calculation changes dramatically once legal liability enters the equation. For more detail, see our comprehensive guide on legal remedies for review bombing.
Court Injunctions
In severe cases where the competitor continues despite a cease and desist, you can seek a court injunction ordering them to cease the fake review activity. Injunctions require demonstrating that you're suffering ongoing harm and that other remedies have been insufficient. This is the most expensive legal path but provides the strongest enforcement mechanism.
Under Attack Right Now?
Don't wait. Our emergency response team can assess your situation, identify fraudulent reviews, and begin the dispute process within hours. We've successfully challenged thousands of fake reviews across hundreds of coordinated attack cases. Start with a free, no-obligation review audit.
Get Emergency Review AuditRecovery Strategy: After the Attack
Once the fake reviews have been disputed and (hopefully) actioned by Google, your work isn't done. A fake review attack can leave residual damage to your rating and your search visibility. Here's how to recover:
Rebuild Your Review Velocity
The best antidote to rating damage is a healthy flow of genuine positive reviews. Reinvigorate your review generation strategy — send follow-up emails or texts to recent customers with a direct link to your Google review page. Don't incentivise reviews (that violates Google's policies) but do make it easy and timely. Customers are most likely to leave a review within 24 hours of their experience.
Monitor for Recurring Attacks
Once you've been targeted, the likelihood of a repeat attack increases. Set up real-time review monitoring through your GBP dashboard or a third-party tool. Review Dispute Pro's reputation management service includes real-time alerts that notify you of new reviews as they're posted, giving you the ability to identify and respond to new attacks within hours rather than days.
Strengthen Your GBP Profile
A complete, active Google Business Profile is more resilient to attack. Ensure your profile has current photos, accurate business hours, complete service descriptions, and regular posts. Active profiles with high engagement signals receive more favourable treatment from Google's algorithms, which can help offset the impact of any fake reviews that survive the dispute process.
Prevention: Reducing Your Vulnerability
While you can't completely prevent a determined competitor from attacking your reviews, you can make your business more resilient:
- Maintain a high review volume: Businesses with 200+ genuine reviews are far less impacted by a handful of fake ones than businesses with 20 reviews. A single fake 1-star review drops a 20-review business's average dramatically; it barely moves the needle on a 200-review profile.
- Respond to all reviews: Active review management signals to both Google and potential customers that you're engaged. It also means you'll notice anomalies faster.
- Build relationships with regular customers: Loyal customers who see fake reviews on your profile may proactively leave supportive reviews or flag suspicious ones.
- Document your customer interactions: Maintain thorough records so you can quickly cross-reference any reviewer against your customer base.
- Invest in ongoing monitoring: Real-time review monitoring through our GBP management service means you're never blindsided by an attack.
Competitor fake review attacks are unfortunately common, but they're not insurmountable. The businesses that recover fastest are the ones that act decisively in the first 48 hours, file well-documented disputes, and have a recovery strategy ready to execute. If you want to see how a real attack was handled from start to finish, read our case study on disputing 47 fake reviews for a Sydney restaurant.